---
typeId: req
recordId: benac-enc-006
fields:
  title: No deterministic encryption by default
  statement: Benac shall not use deterministic or convergent encryption for
    private blobs by default.
  rationale: Deterministic encryption leaks equality and can enable guessing attacks.
  verification: Same private plaintext encrypted twice produces different
    ciphertext unless explicit opt-in profile is used.
  testable: true
  status: draft
  area: BENAC-ENC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.6 Encryption, decryption, and disclosure control
  order: 60
---
